Security Bulletin: TLS padding vulnerability affects IBM Security Access Manager for DataPower (CVE-2014-8730)

Mitigation for IBM Security Access Manager for DataPower 8.0.0.5

1. Select Objects > Security Access Manager > Access Manager Reverse Proxy from the WebGUI navigation panel.
2. Select the Reverse Proxy instance.
3. Select the Manage Files tab and then the Edit button for the Configuration File property.
4. In the [ssl] stanza, add the bold lines below to the following two sections.
   # Specify any additional GSKit attributes which should be used when
   # initializing an SSL connection with the client. A complete list of
   # the available attributes is included in the GSKit SSL API
   # documentation.
   #
   # The configuration entry may be specified multiple times, one for each
   # GSKit attribute. The entry should be of the format:
   # gsk-attr-name = <type>:<id>:<value>
   #
   # - where <type> is one of 'enum', 'string', 'number'
   # and <id> corresponds to the identity associated with a GSKit attribute
   # (e.g., GSK_HTTP_PROXY_SERVER_NAME = 225)
   #
   # An example configuration could be:
   # gsk-attr-name = string:225:proxy.ibm.com
   
   gsk-attr-name = enum:471:1 
   
   # Specify any additional GSKit attributes which should be used when
   # initializing an SSL connection with a junctioned server. A complete
   # list of the available attributes is included in the GSKit SSL API
   # documentation.
   #
   # The configuration entry may be specified multiple times, one for each
   # GSKit attribute. The entry should be of the format:
   # jct-gsk-attr-name = <type>:<id>:<value>
   #
   # - where <type> is one of 'enum', 'string', 'number'
   # and <id> corresponds to the identity associated with a GSKit attribute
   # (e.g., GSK_HTTP_PROXY_SERVER_NAME = 225)
   #
   # An example configuration could be:
   # jct-gsk-attr-name = string:225:proxy.ibm.com
   
   jct-gsk-attr-name = enum:471:1
5. Click Apply to deploy the changes.